Laserfiche WebLink
information of customers, constituents and employees. The secure processing, <br />maintenance and transmission of this information is critical to department operations and <br />the provision of citizen services. Increasingly, governmental entities are being targeted by <br />cyberattacks (including, but not limited to, hacking, viruses, malware and other attacks on <br />computers and other sensitive digital networks and systems) seeking to obtain confidential <br />data or disrupt critical services. A rapidly changing cyber risk landscape may introduce <br />new vulnerabilities and avenues that attackers/hackers can exploit in attempts to cause <br />breaches or service disruptions. Employee error and/or malfeasance may also contribute <br />to data loss or other system disruptions. Additionally, the County's computer networks and <br />systems routinely interface and rely on third party systems that are also subject to the risks <br />previously described. Any such breach could compromise networks and the <br />confidentiality, integrity and availability of systems and the information stored there. The <br />potential disruptions, access, modification, disclosure or destruction of data could result in <br />interruption of the efficiency of County commerce, initiation of legal claims or <br />proceedings, liability under laws that protect the privacy of personal information, <br />regulatory penalties, disruptions in operations and the services provided and the loss of <br />confidence in County operations, ultimately adversely affecting County revenues. <br />The County's cybersecurity program is managed by cybersecurity professionals <br />within the Information Technology Department. This group's primary concern is <br />protecting electronic assets and sensitive data stored on and transmitted through the <br />County's networks and servers. This chiefly includes all financial data, employee records <br />and other sensitive personnel information and sensitive customer data. Preventative <br />actions being taken by the County include diligent firewall monitoring, proactive security <br />evaluation of new software prior to launching on the County's networks and servers, <br />institution and consistent application of PCI (Payment Card Industry) security standards, <br />and annual cybersecurity training for County employees. Access to County systems ends <br />upon termination of employment with the County, and County -owned electronic assets are <br />obtained from the terminated employee at that time. All external emails are heavily <br />screened to ensure the County's cyber defenses are not penetrated. HIPAA (Health <br />Insurance Portability and Accountability Act) and PCI compliance are also areas of great <br />concern with respect to the County's cybersecurity efforts. Despite the County's efforts in <br />this area, no assurance can be given that any cyberattacks, if successful, will not have a <br />material adverse effect on the operations or financial condition of the County. <br />LITIGATION <br />[UNDER REVIEW] <br />General. The Board, the Clerk, the Sheriff, the Property Appraiser and the Tax <br />Collector are defendants from time to time in various lawsuits. The County Attorney <br />represents the Board. The Property Appraiser, the Clerk, the Sheriff, and the Tax Collector <br />each have separate counsel. It is the opinion of the County Attorney with respect to <br />ER <br />